assets-get-data
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill refers to
unity-mcp-cli, recommending its installation vianpm install -gor usage vianpxto perform its primary function. - [COMMAND_EXECUTION]: The core functionality relies on executing shell commands through the
unity-mcp-clitool to interact with the Unity environment. - [INDIRECT_PROMPT_INJECTION]: The skill ingests data from Unity assets which may contain untrusted content if the project source is external.
- Ingestion points: Asset field values and properties retrieved via the
assets-get-datatool as defined inSKILL.md. - Boundary markers: Absent; there are no specific instructions to the agent to treat asset data as untrusted or to use delimiters.
- Capability inventory: The skill allows reading any serializable asset data from the Unity project.
- Sanitization: The skill does not mention any validation or escaping of the values retrieved from the assets before they are presented to the agent.
Audit Metadata